On Thu, 2018-09-06 at 16:03 -0400, Ranbir via FreeIPA-users wrote:
On Thu, 2018-09-06 at 19:25 +0300, Alexander Bokovoy via
FreeIPA-users
wrote:
>
> By default FreeIPA deals with fully qualified host names. Unless you
> added non-FQDN names as aliases to your host records in IPA (I
> suspect
> you don't), doing non-FQDN ssh access will not work if they aren't
> resolved by the ssh client to FQDN ones like others in the thread
> pointed out.
I still don't understand how resolving to the FQDN works from some
hosts and not others. For one, the DNS config on all servers is the
same. Second, the hosts file for each follows the same format. Third, I
don't have any aliases in IPA.
I need to ask, if you really mean "delegation" or if you mean "single-
sign-on" here.
Delegation is completely unrelated to whatever server name is used, so
a short name won't break delegation per se. However SSO will be broken
if a ticket cannot be found.
Simo.
--
Simo Sorce
Sr. Principal Software Engineer
Red Hat, Inc